Hacker News Reader

> log into personal services from locked down corporate machines

This is usually a bad idea, and is sometimes expressly forbidden.

But. more generally, there must be a flow for accessing your account when the passkey is not available, and possibly cannot be recovered.

View on HN

I'm limited in what applications I can install at work. I am not limited in what websites I can access on my lunch break (within reason).

This is one of the core use cases for why FIDO Cross-Device Authentication was created. To be able to use a passkey to sign in on a shared device, a device you don't control, or a device where you just need temporary access to something.

Just tried that.

Logged into Passkeys.io on my phone, and created a passkey.

Then tried to log in to it on my Windows desktop, using the "With my phone" option. First time around it failed to connect to my phone. Future times it connected, but told me that the phone had no appropriate passkeys on it. At which point I gave up.

Edit: I then tried on GitHub, and it worked perfectly! Okay, that's pretty awesome.

Reply on news.ycombinator.com